$ rpki-client -vvf rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft File: hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft (raw, json) Hash identifier: 2/lnwYxxpgPcqBSb/AxlFOLOXhbkXvCjCqLHdWEp61c= Subject key identifier: 58:55:7B:DB:01:9E:FE:EC:7E:4C:29:F4:1B:FF:FE:F3:73:41:E0:EE Authority key identifier: 84:7F:2E:12:EA:B5:06:A5:01:09:94:42:07:B1:D7:02:66:77:F0:9B Certificate issuer: /CN=A916CDAC/serialNumber=847F2E12EAB506A50109944207B1D7026677F09B Certificate serial: 6A Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft Manifest number: 66 Signing time: Wed 25 Mar 2026 07:11:00 +0000 Manifest this update: Wed 25 Mar 2026 07:10:59 +0000 Manifest next update: Wed 01 Apr 2026 07:10:59 +0000 Files and hashes: 1: hH8uEuq1BqUBCZRCB7HXAmZ38Js.crl (hash: lbpXCwvUtRHPJw2mGPnslkhGR+0HiSOsHTaFjobX/kE=) 2: 33C3BDD69AA111F0944EF628C4F9AE02.roa (hash: zExyQQHeecBohiLc86ZLJXlDWNlgRbqbvrDnE+PSuCQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.crl rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:10:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 106 (0x6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CDAC, serialNumber=847F2E12EAB506A50109944207B1D7026677F09B Validity Not Before: Mar 25 07:10:59 2026 GMT Not After : Apr 1 07:10:59 2026 GMT Subject: CN=69c38a83-f9ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:eb:5e:68:b5:08:d4:0f:93:2c:ef:06:86:10: c3:66:5c:4c:57:86:4c:a9:2d:b9:74:1d:50:7a:a7: dd:f8:f0:ef:65:4f:ce:16:01:8b:4b:15:29:30:d6: 24:f2:33:a5:8a:4a:9a:2e:6c:02:60:41:5b:cf:f8: bd:62:d6:e7:d8:72:31:c8:ec:cc:94:45:f3:4b:a1: 90:30:6d:44:27:31:ca:ce:b3:cc:d7:48:5d:e6:47: c4:c5:ae:14:a4:1e:17:c2:23:38:56:cd:36:35:87: fc:b8:81:ab:e3:1a:e2:b4:17:90:9a:10:f8:62:74: 02:50:bc:d0:37:d4:09:fb:39:06:88:5e:56:6f:4b: 14:21:69:e5:ba:c4:29:5c:3f:c6:35:d6:35:a3:a7: b3:f9:e1:be:f6:bc:60:31:a6:e2:27:55:2a:c0:7b: 60:c9:2a:6a:7d:6b:3c:36:f6:63:e1:65:63:38:64: 67:63:f7:99:f5:c8:3b:a3:cb:a5:18:1b:10:54:60: 32:12:29:46:ed:5a:fc:0f:22:8d:47:9b:d6:6b:7c: 93:f2:8d:d0:9c:93:7d:71:70:fc:76:c7:9b:b0:c9: 0b:dc:9b:33:f6:20:e5:c3:b4:b7:43:23:92:bb:e2: 01:39:d1:ed:71:60:77:4e:4c:04:7e:10:75:90:42: 31:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:55:7B:DB:01:9E:FE:EC:7E:4C:29:F4:1B:FF:FE:F3:73:41:E0:EE X509v3 Authority Key Identifier: keyid:84:7F:2E:12:EA:B5:06:A5:01:09:94:42:07:B1:D7:02:66:77:F0:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:85:9f:5c:94:23:c9:00:75:2d:68:cb:33:19:38:97:4c:31: 6b:90:87:f8:c4:90:e8:e7:f6:58:56:f5:75:d5:ee:ae:15:a4: 64:92:5f:31:1c:6c:41:45:64:b7:d4:52:05:50:6c:cf:ec:d4: 8c:ab:68:e6:38:bc:49:b7:1e:cd:73:37:c0:e4:64:f5:d8:69: 3f:8b:60:6f:b7:bc:2d:c5:00:0e:b4:30:aa:f8:d5:04:65:f1: be:98:06:41:bd:c4:3e:9f:29:36:f6:1c:45:6a:de:10:5b:ec: 9b:e1:05:e7:9d:3d:d2:b9:62:cf:74:35:4f:44:f4:bb:6e:0b: 83:c9:15:22:83:03:6a:e5:ba:9c:12:28:f4:4b:61:b8:26:bc: c5:73:02:fb:60:1a:85:90:43:84:b7:90:60:44:50:de:3c:5f: a7:f8:cb:6b:63:0b:a4:be:ff:1e:ed:a0:04:4e:30:16:9e:3c: 47:6f:f4:a9:27:96:55:1f:77:54:a5:03:07:69:9d:4f:2a:86: 35:95:0a:67:2c:d9:28:ac:17:66:7f:6f:e6:22:b6:86:ea:04: 23:c4:53:89:7f:41:ca:7f:91:00:00:ad:6c:e3:56:cf:b5:b0: de:f7:7f:58:0d:76:0d:7d:27:c0:f2:eb:fa:cc:37:b4:cf:9f: aa:3f:17:d9 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBajANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 Q0RBQzExMC8GA1UEBRMoODQ3RjJFMTJFQUI1MDZBNTAxMDk5NDQyMDdCMUQ3MDI2 Njc3RjA5QjAeFw0yNjAzMjUwNzEwNTlaFw0yNjA0MDEwNzEwNTlaMBgxFjAUBgNV BAMTDTY5YzM4YTgzLWY5ZWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDK615otQjUD5Ms7waGEMNmXExXhkypLbl0HVB6p9348O9lT84WAYtLFSkw1iTy M6WKSpoubAJgQVvP+L1i1ufYcjHI7MyURfNLoZAwbUQnMcrOs8zXSF3mR8TFrhSk HhfCIzhWzTY1h/y4gavjGuK0F5CaEPhidAJQvNA31An7OQaIXlZvSxQhaeW6xClc P8Y11jWjp7P54b72vGAxpuInVSrAe2DJKmp9azw29mPhZWM4ZGdj95n1yDujy6UY GxBUYDISKUbtWvwPIo1Hm9ZrfJPyjdCck31xcPx2x5uwyQvcmzP2IOXDtLdDI5K7 4gE50e1xYHdOTAR+EHWQQjG3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUWFV72wGe /ux+TCn0G//+83NB4O4wHwYDVR0jBBgwFoAUhH8uEuq1BqUBCZRCB7HXAmZ38Jsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZDREFDLzcyNjBGQzBDOEYz OTExRjA4NjMyQTAzOUM0RjlBRTAyL2hIOHVFdXExQnFVQkNaUkNCN0hYQW1aMzhK cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG RDFGRjIvaEg4dUV1cTFCcVVCQ1pSQ0I3SFhBbVozOEpzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZD REFDLzcyNjBGQzBDOEYzOTExRjA4NjMyQTAzOUM0RjlBRTAyL2hIOHVFdXExQnFV QkNaUkNCN0hYQW1aMzhKcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAfhZ9clCPJAHUtaMszGTiXTDFrkIf4xJDo5/ZYVvV11e6uFaRkkl8xHGxBRWS3 1FIFUGzP7NSMq2jmOLxJtx7NczfA5GT12Gk/i2Bvt7wtxQAOtDCq+NUEZfG+mAZB vcQ+nyk29hxFat4QW+yb4QXnnT3SuWLPdDVPRPS7bguDyRUigwNq5bqcEij0S2G4 JrzFcwL7YBqFkEOEt5BgRFDePF+n+MtrYwukvv8e7aAETjAWnjxHb/SpJ5ZVH3dU pQMHaZ1PKoY1lQpnLNkorBdmf2/mIraG6gQjxFOJf0HKf5EAAK1s41bPtbDe939Y DXYNfSfA8uv6zDe0z5+qPxfZ -----END CERTIFICATE-----Generated at Thu Mar 26 12:54:09 2026 by rpki-client